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Abstract 

Let S = (si, S2, • • • j %) • • •) be a linear recurring sequence with terms 
in GF(q n ) and T be a linear transformation of GF(q n ) over GF(q). De- 
note T(S) = (T(si),T(s2), ■ ■ ■ , T(s m ), . . .). In this paper, we first present 
counter examples to show the main result in [A.M. Youssef and G. Gong, 
On linear complexity of sequences over GF(2 n ), Theoretical Computer 
Science, 352(2006), 288-292] is not correct in general since Lemma 3 in 
that paper is incorrect. Then, we determine the minimal polynomial of 
T(S) if the canonical factorization of the minimal polynomial of S with- 
out multiple roots is known and thus present the solution to the problem 
which was mainly considered in the above paper but incorrectly solved. 
Additionally, as a special case, we determine the minimal polynomial of 
T(S) if the minimal polynomial of S is primitive. Finally, we give an upper 
bound on the linear complexity of T(S) when T exhausts all possible linear 
transformations of GF(q n ) over GF(q). This bound is tight in some cases. 
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1 Introduction 

A sequence S = (si, s%, . . . , s m , . . .) with terms in a finite field GF(q) with q el- 
ements is called a linear recurring sequence over GF(q) with characteristic poly- 
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nomial 

f(x) = a Q + aix H h a m x m G GF(q)[x) 

if 

a Si + ais i+1 H h a m s i+m = for any i > 1. 

The monic characteristic polynomial of 5* with least degree is called the minimal 
polynomial of S. The linear complexity of S is defined as the degree of the mini- 
mal polynomial of S. The linear complexity of sequences is one of the important 
security measures for stream cipher systems (see [2], [3], [I], [5]). For a general 
introduction to the theory of linear feedback shift register sequences, we refer the 
reader to [HI Chapter 8] and the references therein. 

S = (si, S2, ■ ■ ■ , s m , . . .) is a linear recurring sequence over GF{2 n ). It is 
well known that GF(2 n ) could be viewed as an n-dimensional vector space over 
GF{2). Let {£i, £2, • • • > £n} an d {771, r]2, ■ ■ ■ , Vn} be two bases of GF{2 n ) over 
GF{2). For the basis {£1, £2, • • • > £n}> eac h term Sj could be written as Sj = 
Sii£i + s i2 & H h Si„£ n where s - G GF(2). Let 5" = (si, s' 2 , ...,s' m ,...) where 

= saTji + Si2T]2 + • ■ ■ + Si n r] n . Youssef and Gong [1] studied the minimal 
polynomial of S' if the minimal polynomial of 5* without multiple roots is known. 
Let T be a linear transformation of GF(2 n ) over GF(2) and denote T(S) = 
(T(si), T(s 2 ), ■ ■ ■ , T(s m ), . . .). It is known that the effect of changing basis of 
GF(2 n ) over GF(2) is equivalent to the influence of applying an invertible linear 
transformation T to the sequence S, that is, there exists an invertible linear 
transformation T of GF(2 n ) over GF(2) such that T(S) = S'. In this paper, we 
point out that the main result in pQ is not correct in general and consider the 
corresponding problem discussed in pQ for general finite field GF(q n ) and general 
linear transformation T which is no longer required to be invertible. In this case, 
S is a linear recurring sequence over GF(q n ) and T is a linear transformation 
of GF(q n ) over GF(q). We determine the minimal polynomial of T(S) if the 
canonical factorization of the minimal polynomial of S without multiple roots is 
known. Therefore, we give the correct solution to the problem considered in pQ. 

Our paper is organized as follows. In Section El we give some notations and a 
number of basic results that will be needed in this paper. In Section [3l we present 
counter examples to show that the main result [H Theorem 1] is not correct in 
general since [H Lemma 3] is incorrect. In Section HI we determine the minimal 
polynomial of T(S) if the canonical factorization of the minimal polynomial of 
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S without multiple roots is known and thus present the correct results for the 
corresponding problem, which is more general than the case considered in p] but 
incorrectly solved. In Section [U we determine the minimal polynomial of T(S) if 
the minimal polynomial of S is primitive. In Section [6j an upper bound on linear 
complexity of T(S) is given. This bound is tight in some cases. 

2 Preliminaries 

In this section, we give some definitions needed in this paper and some lemmas 
upon which the following sections are discussed. 

Let GF(q)(x~ 1 ) be the field of formal Laurent series over GF(q) in x~ l . This 
field consists of the elements: 

oo 

s i x ~* 

i=r 

where all G GF(q) and r is an arbitrary integer. The algebraic operations 
in GF(q)(x~ 1 ) are defined in the usual way. The field GF(q)(x" 1 ) contains the 
polynomial ring GF(q)[x] as a subring. The sequence S = (si, s 2 , ■ ■ ■ , s m , . . .) 
over GF(q) could be viewed as an element of GF(q)(x~ 1 ): 



S{x) = 



S{X 

1=1 



which is called the generating function associated with S. Then, we have the 
following lemma. 

Lemma 1 [3, Lemma 2] Let h{x) e GF(q)[x] be an monic polynomial. Then 
the sequence S = (si, s 2 ■ ■ ■ , s m . . .) of elements of GF(q) is a linear recurring 
sequence with minimal polynomial h(x) if and only if 

with g{x) G GF(q)[x], deg(g) < deg(h), and gcd(g,h) = 1. 

Note that it is easy to obtain g(x) if the sequence S and its minimal polyno- 
mial h(x) are known. In the following sections, we will use g(x) to conduct the 
computation, particularly in our main algorithm to be discussed in Section HI 
Define a mapping a from GF(q n ) to GF(q n ) as follows: 



It is obvious that a is a field automorphism of GF(q n ). Then, we can extend 
a to be a ring automorphism of the polynomial ring GF(q n )[x] as follows: For 

f(x) = a + a%x + h a m x m G GF(q n )[x], 

a : f(x) — ► v(f(x)) 

where a(f(x)) = cr(a ) + cr(ai)x + ■ ■ • + a(a m )x m . Similarly, we can extend a 
again to be a field automorphism of the formal Laurent series field GF{q n ){x^ 1 ) 
as follows: For S(x) = X]^ r s i x ~\ 

a : S{x) — > a(S(x)) 

where a(S(x)) = J2i^ r °~(. s i) x ~ l - Note that for any f(x),g(x) G GF(q n )[x], 

a(f(x)g(x)) = a(f(x))a(g(x)). 

and if g(x) 0, we have 

f(x) a(f(x)) _ 
g(x) v{g{x))' 

In this paper, we use only one notation a to represent the above three mappings 
and to represent the kth usual composite of a. Note that a® is the identity 
mapping. We are now able to give some lemmas that will be used to establish 
our results in this paper: 

Lemma 2 [SJ Lemma 4] Let f(x) G GF(q n )[x}. Then a(f(x)) is irreducible 
over GF(q n ) if and only if f(x) is irreducible over GF(q n ). 

Lemma 3 [6, p. 81, Exercise 2.36] Note that GF(q n ) is an n- dimensional vector 
space over GF(q) . Then, T is a linear transformation of GF(q n ) over GF(q) if 
and only if there uniquely exist Co, Ci, . . . , c n _i G GF(q n ) such that 

T(x) = c x + C\X q H hc n _ix 9 , xeGF(q n ). 

Lemma 4 [6, Theorem 8.57] Let S\, S2, ■ ■ • , be linear recurring sequences 
over GF(q) . The minimal polynomials of Si, S2, • • • , Sk are h\(x), h2(x), . . . , hk{x) 
respectively. Ifh\{x), h,2(x), . . . , hk(x) are pairwise relatively prime, then the min- 
imal polynomial of Yj%=i ^ s ^ e product of h\(x), ^(x), . . . , hk{x). 
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Lemma 5 [H Lemma 2] Let S be a linear recurring sequence over GF(q) with 
minimal polynomial h(x) = hi(x)h 2 (x) ■ ■ ■ h k (x) where hi (x), h 2 (x), ... , hk(x) are 
monic polynomials over GF(q). If hi(x), h 2 (x), . . . , h k {x) are pairwise relatively 
prime, then there uniquely exist sequences Si, S 2 , . . . , S k over GF(q) such that 

s = s 1 + s 2 + --- + s k 

and the minimal polynomials of Si, S 2 , ■ ■ ■ , Sk are hi(x), h 2 (x), . . . , h k (x) respec- 
tively. 

Below we present a specific method to calculate Si, S 2 , . . . , S k from S in order 
to obtain the minimal polynomial of T(S) in this paper. For this purpose, we use 
the left shift operator L to define characteristic polynomials of linear recurring 
sequences. This way to define the characteristic polynomials of linear recurring 
sequences is discussed in |9] Chaper 4]. Specifically, define L to be a linear 
mapping of sequences over GF(q) as follows: 

L : (si, s 2 ,S3 . . . , s m , . . .) — > (s 2 , S3, ... , s m+ i . . .). 

Let f(x) = a + ayx + • • • + a k x k G GF(q)[x], then f(L) is a linear mapping of 
sequences over GF(q) as follows: 

S — ► f{L){S) = a S + aiL{S) + ■■■ + a k L^\S). 

From the definition of f(L), we have f(L)(S) = if and only if f(x) is a charac- 
teristic polynomial of S. 

Algorithm 1 Using the same notations as in Lemma the method to obtain 
Si, S 2 , . . . , S k from S is as follows: 

Step 1. Using the Division Algorithm of polynomials over GF(q), we obtain 
the polynomials Ui(x), u 2 (x), . . . ,Uk(x) over GF(q) satisfying: 

ui{x) Y[ hi(x) + u 2 (x) Y[ hi(x) H h u k (x) Y[ht(x) = i. (i) 

Step 2. S 3 = Uj (L)n^hi(L)(S). 

Proof: Step 1 follows from the fact that hi, h 2 , . . . , h k are pairwise relatively 
prime. Due to the equation flTJ, we have 

S = Si + s 2 + • • • + s k . 
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Meanwhile, since hi(L)h 2 (L) ■ ■ ■ hk(L)(S) = 0, we have 

hj(L)Sj = hj(L)uj(L) JJ hi(L)(S) = 0. 

Thus, hj(x) is a characteristic polynomial of Sj. Assume that the minimal poly- 
nomial of Sj is h'j(x) which is a monic divisor of hj(x) for 1 < j < k. Then, we 
have that h\{x), h 2 (x), . . . , h' k (x) are pairwise relatively prime. By Lemma HI the 
minimal polynomial of S is Ylj=i ^'j( x )- Thus, 

h 1 (x)h 2 (x) ■ ■ ■ h k (x) = hi{x)h 2 {x) ■ ■ ■ hk(x). 

Therefore, for 1 < j < k, we have 

hj(x) = hj(x) 

which completes the proof. □ 



3 Counter examples 

In this section, we point out that the main result [TJ Theorem 1] is not correct 
in general since pfl Lemma 3] is incorrect. The wrong lemma [U, Lemma 3] is as 
follows: 

Incorrect Result 1 [fl Lemma 3] For i = 1, 2, . . . , k, let Si be a homogeneous 
linear recurring sequence in GF(q) with minimal polynomial hi(x). Then, the 
minimal polynomial h(x) of the sequence S = Si+S 2 +- ■ -+Sk, Si ^ Sj fori ^ j , is 
given by the least common multiple of hi, h 2 , . . . , hk, h{x) =lcm[/i 1 , h 2 , . . . , hk]- 

Actually, a counter example for this lemma is given in [61 Example 8.58]. For 
the completeness of the paper, we give another similar example: 

Counter Example 1 Let S\,S 2 be two linear recurring sequences over GF(2) 
with generating functions 

= (x + l)(x 3 + x + l)' = (a; + l)(a; 2 + x + l)' 

By Lemma we obtain that the minimal polynomials of Si and S 2 are (x + 
l)(x 3 + x + 1) and (x + l)(x 2 + x + 1), respectively. Meanwhile, we have 

(S 1 + S 2 ){x) = Si(x) + S 2 (x) = 

{X d + X + ±){X Z + X + 1) 
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which implies that the minimal polynomial of Si + S2 is (x 3 + x + 1) (x 2 + x + 1) . 
However, lcm[(x+l)(x 3 +x+l), (x+l)(x 2 +x+l)] = (x 3 +x+l)(x 2 +x+l)(x+l) ^ 
(x 3 + x + l)(x 2 + x + 1). Therefore, |H Lemma 3] is incorrect. 

Note that the main result [H Theorem 1] is obtained by using the incorrect 
[U Lemma 3]. Below we give a counter example to show that [U Theorem 1] is 
incorrect in general. In order to establish our results in this paper, we introduce 
the following notations and restate [fl Theorem 1] in another way. 

For a linear transformation T of GF(q n ) over GF(q), we can extend T to be 
a linear transformation of GF(q n )(x~ 1 ) over GF(q) as follows: 

00 00 

i=r i=r 

Meanwhile, we could also extend the original T to be a linear transformation of 
sequences with terms in GF(q n ) as follows: 

T : (s ll s 2 ,...,s mi ...) — ► (T(si), T(s 2 ), • • • , T(s m ), . . .). 

In this paper, we use only one notation T to represent the above three linear 
transformations. Therefore we have: 

T(S(x)) = T(S)(x) 

for any sequence S over GF(q n ). 

Note that the linear transformation T of GF(q n ) over GF(q) is invertible if 
and only if T is a linear transformation which transforms one basis to another. 
This is the case considered in [TJ. We are now able to restate [TJ Theorem 1] in 
the following way: 

Incorrect Result 2 [H Theorem 1] Let S be a linear recurring sequence over 
GF(2 n ) with minimal polynomial h(x) and T be an invertible linear transforma- 
tion of GF(2 n ) over GF(2) . Assume by Lemma\^that 

T(x) = c x + cix 2 H h c n _ix 2 ™~\ x G GF(2 n ) 

where cq, C\, . . . , c n _i G GF(2 n ). Then the minimal polynomial ofT(S) is given 
by 

hm[a {io) (h(x)), a {il \h(x)) } . . . , a^\h(x))\ 
where {iq, ii, . . . , i r } = {j\cj 7^ 0} and a is defined in the paragraphs below Lemma 

m 
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Counter Example 2 Let T be a linear transformation of GF(2 4 ) over GF(2) 
such that: 

T(x) = x + x 2 + x 2 . 

Let 6 be a primitive element in GF(2 A ). Let S be a linear recurring sequence over 
GF{2 A ) given by 

s = (e 10 , e\ i, e 10 , e 5 , 1, e 10 , e\ 1, e 10 , e 5 , 1, . . .). 

The least period of S is 3 and the minimal polynomial of S is h(x) = x + 6 10 . 
Then, T is invertible and the minimal polynomial of T(S) is not given by 

lcm[h(x), a(h(x)), a {2) (h(x))\. (2) 

Proof: We first show that T is invertible. Note that T is invertible is equiv- 
alent to say that ker(T) = {0}. Suppose, on the contrary, that there exists 
nonzero b G GF(2 4 ) such that T(b) = b + b 2 + b A = 0. So, 1 + b + b 3 = 0. Since 
x 3 + x + l\x 7 — 1, then we have b 7 = 1. Meanwhile, 6 15 = 1 since b G GF(2 4 ). 
Hence, 6 = 1 since gcd(7, 15) = 1. However, 1 is not a root of the polynomial 
x + x 2 + x 4 . That's a contradiction. So, ker(T) = {0} which implies that T is 
invertible. Since 6 15 = 1 and 

s = (# 10 , e\ i, # 10 , e\ i, e w , e\ 1, e 10 , e\ 1, . . .), 

we have 

s(x) = e 1 ^- 1 + e 5 x~ 2 + x- 3 + e 10 x' 4 + e 5 x~ 5 + ■■ 



x + e 10 ' 

So, the minimal polynomial h(x) of S is x + 6 10 . Meanwhile, by the definitions of 
the extended linear transformation T and the field automorphism a, T(S(x)) = 
S{x) + a(S(x)) + o-W{S(x)). Then, 

6 10 a(6 10 ) a (2 H6 10 ) 

T(S)(x)=T(S(x)) = ~—^+ ,}, L + 



x + 9 10 a(x + 6 w ) aW{x + d 
+ ~ + 



10 \ 



x + e 10 x + e 5 x + e 10 
e 5 



x + e 5 ' 

So, the minimal polynomial of T(S) is x + e 5 . However, 

lcm[h(x),a(h(x)),a {2) (h(x))} = lcm[x+e w ,x+e 5 ,x+e 10 ] = {x+e 5 ){x+e 10 ) x+e 5 . 
Therefore, [U Theorem 1] is incorrect. □ 
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4 Minimal polynomials of sequences 



In this section, we consider the more general case in which the finite field is no 
longer specified to be GF(2 n ) and the invertibility of the linear transformation T 
of GF(q n ) over GF(q) is not required. Recall that the main result [H Theorem 
1] is not correct. We present the correct solution to the corresponding problem 
studied in [1] and determine the minimal polynomial of T(S) if the canonical 
factorization of the minimal polynomial of S without multiple roots is known. 
By Lemma [3], the linear transformation T of GF(q n ) over GF(q) must be of the 
form: 

T(x) = c x + Cl x q + ■ ■ ■ + c n . lX qn ~\ c i EGF(q n ). (3) 

Let A; be a positive factor of n and n = kt. Then, let Tkj(x) denote the following 
polynomial: 

T kJ (x) = CjX q3 + c k+j x qk+] H h c ( t-i)k+jX g{t 1)k+ \ <j < k. (4) 

Throughout the rest of the paper, we will only consider linear recurring sequences 
with minimal polynomials that have no multiple roots, which is the case consid- 
ered in [TJ. 

Recall the definition of o in the paragraphs below Lemma [TJ For fix) £ 
GF(q n )[x], we denote k(f) the least positive integer I such that a"'(f(x)) = f(x). 
Since a^ n \f(x)) = f(x), we have k(f) always exists. 

Lemma 6 [S, Lemma 3] For any f(x) £ GF(q n )[x] and positive integer I, 
a^(f(x)) = f(x) if and only ifk(f)\l. 

Note that k(f) divides n for any f(x) £ GF(q n )[x}. 
For any positive integer m, define 

(GF(q n )) m = {(oi, 02,..., dm) I a, £ GF(q n ) for 1 < % < m}. 

We define a mapping \i as follows: 

oo 

Ai : |J (GF(q n )) m — Z 

m=l 

(a%, a 2 , . . . , a m ) — > a 2 , . . . , a m ) 

where 



H{a 1 ,a 2 , 




0, if (a 1 ,a 2 ,...,a m ) = (0,0,..., 0), 

1, if (a 1 , a 2 , . . . , a m ) ^ (0,0,..., 0). 
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Theorem 1 Let S be a linear recurring sequence over GF(q n ) with irreducible 
minimal polynomial h(x) . Assume that g(x) = bo+bix+- • -+hx l is the polynomial 
over GF(q n ) such that S(x) = g(x)/h(x) and I < deg(h(x)). Let T be a linear 
transformation ofGF(q n ) over GF(q) . Then, the minimal polynomial ofT(S) is 
given by 

h(x) eo (cr(h(x))) ei ■ ■ ■ (a {k{h) - l \h(x))) ek ^ 

where e A = n(T k{h)J (b ), T fc(/l)J (6i), . . . , T k{h):j (k)) for < j < k(h), and T k)j (x) 
is defined by |3j] and Q). 

Proof: Let t be the positive factor of n such that tk(h) = n. Then, by ([3]) 
and (jlj), we have 

T(S)(x) = T(S(x)) 

= c S(x) + Cl a(S(x)) + c 2 a {2 \S(x)) + ■■■ + c n ^a^ (S '(x)) 

- c 9 + c a{g) + c am{g) + +c a{n ~ 1Kg) 

- C °h +Cl ^{h) +C2 ^{h) + +Cn - 1 a(^)(h) 

(a) ^ cja^jg) + Ck{h)+ ,a^\g) + ■■■ + c {t . mh)+J a^ k ^(g) 
(6) fc y^ 1 T k{h ) d {b Q ) + T k{h)d (bi)x j V T k{h ),j{k)x l 

where (a) follows from the definition of k(h), (b) follows from the substitution of 
g(x). For < j < k{h) — 1, let Sj be the linear recurring sequence over GF(q n ) 
with the generating function: 

T k ( h ),j(b ) + T k{h)d {bi)x -j h T k{h)ij (k)x l 

By Lemma El since h is monic irreducible, we have that h, a^ l \h), . . . , a^ k ^~ lS> (h) 
are monic irreducible polynomials with the same degree. Then, the minimal poly- 
nomial of Sj is 1 if T k{h ),j(b ) +T k{h)J (b 1 )x H h T k( h),j{bi)x l = 0; otherwise, 

the minimal polynomial of Sj is a^\h). By the definition of k(h), we know that 
h, er^ (h),..., are distinct. In addition, by Lemma (2], they are all 

monic irreducible polynomials. Thus, they are pairwise relatively prime. Mean- 
while, T(S) = X]ji'o _1 Sj- Therefore, by Lemma HI the minimal polynomial of 
T(S) is given by 

h(x) eo (a(h(x))) ei ■ ■ ■ (a^ h) - l \h{x))) ek W^ 
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where ej = fi(T k ( h )j(b ), T kWJ (bi), . . . , T k( j l)d {bi)). This completes the proof. □ 
Below we use Counter Example [2] to illustrate Theorem [TJ 

Example 1 All notations are the same as in Counter Example^ The minimal 
polynomial of S is h(x) = x + 8 10 and 

010 

S{X) = x~T9™' 

Then, g(x) = 9 10 and k(h(x)) = 2. Since T(x) = x + x 2 + x 4 , we have T2${x) = 
x + x A and T 2t i(x) = x 2 . Therefore, by Theorem^ the minimal polynomial of 
T(S) is given by 

(x + 9 w ) eo (a(x + 9 10 )) ei 

where Cq = /i(T 2j o(# 10 )) = and e\ = ;u(T 2il (^ 1() )) = 1. Thus, the minimal 
polynomial of T(S) is x + 6 5 which is the same as the correct result in the proof 
of Counter Example [H 

Corollary 1 Let S be a linear recurring sequence over GF(q n ) with irreducible 
minimal polynomial h(x). Then, for any integer table {eo, e±, . . . , ek(h)-i} where 
Cj is or 1, there exists a linear transformation T of GF(q n ) over GF(q) such 
that the minimal polynomial of T(S) is 

h(x) eo (a(h(x))) ei ■ ■ ■ (a^^ihix)))^- 1 . 

Furthermore, the maximal linear complexity ofT(S), where T exhausts all possible 
linear transformations of GF(q n ) over GF(q) , is k(h)deg(h). 

Proof: It is trivial if 5 is a zero sequence. If 5* is not a zero sequence, then 
there exits nonzero polynomial g(x) over GF(q n ) such that S(x) = g{x)/h{x) 
where g(x) = b + b±x + • ■ ■ + bix 1 and I < deg(h). Since g(x) ^ 0, there exists 
bi 7^ for some < i < I. Let 

k{h)-l 

T{x) = CjX q \ 

j=0 

By Theorem [U we have the minimal polynomial of T(S) is: 
h(x) e °(a(h(x))) e i ■ ■ ■ (o^- l \h(x))Y^)-^ 
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where e'j = [lie^t > e jb\ > ■ ■ ■ > e jbf)- Then, if ej = 0, it is obvious that e'- = 0; if 
ej = 1, we have ejbf ^ which implies e'j = 1. Thus, e'- = ej. Therefore, the 
minimal polynomial of T(S) is: 

h(x) eo (a(h(x))) ei ■ ■ ■ (a^-^ihix)))^^. 

In particular, let ej = 1 for any < j < k(h) — 1, then there exists linear 
transformation T of GF(q n ) over GF(q) such that the minimal polynomial of 
T{S) is 

h(x)a(h(x))---a {k{h) - 1 \h(x)) 

with degree k(h)deg(h) . By Theorem [TJ the linear complexity of T(S') is at most 
k(h)deg(h). Therefore, such a linear transformation T achieves the maximal 
possible linear complexity of T(S). □ 
By Theorem [1] and Corollary [I], we have the following result: 

Corollary 2 Let S be a linear recurring sequence over GF(q n ) with irreducible 
minimal polynomial h(x) . Then, the set of minimal polynomials ofT(S), where 
T exhausts all possible linear transformations of GF(q n ) over GF(q) , is given by 

{h(x) eo (a(h{x))) ei ■■■{a^- 1 \h(x))) ek ^\e j = 0,1 for j = 0, 1, . . . , k{h) - 1}. 

Now, we consider the more general situations. At first, some definitions are 
needed. We define a equivalence relation ~ on GF(q n )[x\: f(x) ~ g(x) if and 
only if there exists positive integer j such that a^\f(x)) = g(x). The equivalence 
classes induced by this equivalence relation ~ are called a — equivalence classes. 
These definitions are introduced in [H Section 3]. 

Theorem 2 Let S be a linear recurring sequence over GF(q n ) with minimal 
polynomial h(x) which is a product of some distinct monic irreducible polynomials 
in one a — equivalence class. Assume that h = hia^ 1 ' (hi) ■ ■ •a^ w ~ 1 '(hi) where 
hi(x) is a monic irreducible polynomial with deg(/ii) = / and i 2 . . . i w -i are 
distinct positive integers less than k{h\). Assume by Lemma{5\ that S = YlJ^o &j 
where Sj is the linear recurring sequence with the minimal polynomial a^ 3 \hi) 
(herein = 0). Let Sj(x) = gj(x) / a^ j \hi(x)) where g^ix) = bj t0 +bj^x+- ■ ■+bj^ j x li 
and lj < I. Let T be a linear transformation of GF(q n ) over GF(q). Then, the 
minimal polynomial ofT(S) is given by 

hi{x) eo {a{hi(x)) ei ) ■ ■ ■ ( ( j (/c(?il) - 1) (/i 1 (x))) efc (' l i)- 1 
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where e u , < u < k(hi), is given by 

w—1 w— 1 w—1 

j=0 j=0 j=0 

where bj^ = for lj < k < I — 1, and [i] — i if < i < k(h\); [i] = k(hi) + i if 
—k(hi) < i < 0, and T k j(x) is defined by |3j) and Q). 

Proof: By ([3]) and (j4]) and noting that bj^ = for lj < k < I — 1, we have 
T(S)(s) 



IB— 1 



10 — 1 

^ eoS,(z) + c 1( x(^(x)) + ■ ■ • + ^-^^(^(a;)) 



j=0 
w—l 

C °rr(ij)(h,\ + Cl n(h+l)(h,\ + ' ' ' + °' 

3=0 

u,-lfc(hi)-l n . -,. , /-I. 

• + -tfc(/ii),«10i,i-lJ^ 

crfe+ u )(/ti) 



E E 

j=0 u=0 

E 1 fc( y^ 1 ^(feQjM-^^^.o) + ^(/iiM^lQj,!^ H h ^fc(fei), [ u -ij] (bjj-^x 1 ' 1 

j=0 u=0 K LJ 

1 Y^=o ' TkfaUu-ijjibjfl) + Y^=o T Khi)\v.-ij}i b i^) x ^ !" ^j^o 1 r K^i)J«-*i](^-0^ _1 



E 



u=0 v 17 



Using the same argument in the proof of Theorem [I] we have the minimal poly- 
nomial of T(S) is: 

/i 1 (a;) eo ( C T(/ il (x))) ei ■ • ■ (o-( fc C*i)-i) (a;) ) )«*c*i)-a 
where for < u < k(h\) 

w—1 w—1 w—1 

e u = fJ'(/' J ^fc(fti),[M-i 7 ] (bj,o) , ?fc(fti),[u-i,-] (bj,i) , ■ ■ ■ , 7^ 7fc(/n),[n-i,-] 

j=o i=0 j=0 

which completes the proof. □ 

Remark 1 ./Vote t/iat So, Si, ... , S w -i in the above theorem could be obtained by 
Algorithm^ 
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Theorem 3 Let S be a linear recurring sequence over GF(q n ) with minimal poly- 
nomial h(x) which has no multiple roots. Assume that the canonical factorization 
of h(x) in GF(q n ) [x] is given by 

i 

hir) n / vv-- /, << 

3=1 

where Pji are distinct monic irreducible polynomials, Pjq, Pji, . . . , Pji. are in the 
same a — equivalence class and P tu , P wv are in different a — equivalence classes 
when t ^ w. Assume by Lemma\^ that S is written as 

S = Si + S2 + • • • + Si 

where Si, S2, ■ ■ ■ , Si are linear recurring sequences over GF(q n ) with minimal 
polynomial PjoPji • • • Pjip 3 = 1> 2, . . . , I, respectively. Let T be a linear transfor- 
mation of GF(q n ) over GF(q). Let hi(x), h,2(x), . . . , hi(x) be the minimal poly- 
nomials ofT(Si),T(S2), • • • , T(Si) respectively. Then, the minimal polynomial of 
T(S) is given by the product of hi(x), h 2 (x), . . . , hi(x). 

Proof: By Theorem [21 the minimal polynomial hj(x) of T(Sj) must be of 
the form 

P l0 (xr(a(P j0 (x))r ■ ■ ■ {aW^iPjaiz)))*™- 1 

where e u = or 1. Meanwhile, since there exist no positive integer k such that 
Ptu = o~( k \P wv ) when t 7^ w, we have that hi(x), h,2(x), . . . , hi(x) are pairwise 
relatively prime. Note that T(S) = T(Si) + T(S 2 ) + ■■■ + T(Si). By Lemma H 
we have the minimal polynomial of T(S) is the product of hi(x), h 2 {x), . . . hi(x). 

□ 

Note that hj (x) could be obtained by Theorem [2j Now, we are able to give our 
main algorithm in this paper: 

Algorithm 2 Let S be a linear recurring sequence over GF(q n ) with minimal 
polynomial h(x) which has no multiple roots. Let T(x) = CqX + C\X q + • • • + 
c n -\X qn 1 be a linear transformation of GF(q n ) over GF(q). Assume that the 
canonical factorization of h(x) over GF(q n ) is given by 

m 

h(x)=l[P 3 (x) 

i=i 
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Then, the procedure to find the minimal polynomial of T(S) is as follows: 

Step 1. Classify {Pj} according to the a — equivalence relation. Then, we get 

i 

h(x)=l[P j0 P jl -.-P jij 

3=1 

where Pji are distinct monic irreducible polynomials, Pjo, Pji, ■ ■ ■ , Pju ore in the 
same a — equivalence class and P tu , P wv are in different a — equivalence classes 
when t ^ w. 

Step 2. Use Algorithm^ to get the decomposition of S such that S = Y^j=i Sj 
and the minimal polynomial of Sj is PjoPji ■ ■ • Pji 3 for 1 < j < I. 

Step 3. Use Theorem^ to calculate the minimal polynomial hj(x) of T(Sj) 
for 1 < j < I. 

Step 4- By Theorem^ the minimal polynomial ofT(S) is rij = i^i( x )- 

At the end of this section, we give an example to show the procedure of the 
algorithm. 

Example 2 Let GF(2) C GF(2 2 ) and a be a root of x 2 + x + 1 in GF(2 2 ). Let 
S be a linear recurring sequence with least period 15 given by 

S = (1, a, a, 0, a, 1, a , a , a, a + 1, 1, 0, 0, a + 1, 0, 1, a, a, 0, a, 1 . . .). 

The minimal polynomial of S is x 3 + ax + a 2 . LetT be a linear transformation of 
GF(2 2 ) over GF(2) such thatT(x) = x + x 2 . Let us find the minimal polynomial 
of 

T{S) = (0, 1, 1, 0, 1, 0, 1, 1, 1, 1, 0, 0, 0, 1, 0, 0, 1, 1, 0, 1,0,...)- 

The procedure is as follows: 

The canonical factorization of x 3 + ax + a 2 is 

x 3 + ax + a 2 = (x + l)(x 2 + x + a 2 ). (5) 

Step 1. The canonical factorization (jSJ) has already been of the desired form. 

Step 2. Using the Division Algorithm for polynomials, we could find Ui(x) = 
ax and U2{x) = a such that (ax)(x + 1) + a{x 2 + x + a 2 ) = 1. Recall that the 
mapping L is defined in the paragraph before Algorithm [TJ By Algorithm (TJ 

S x = a(L 2 + L + a 2 )(S) = (1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,1,.. .) 
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and the minimal polynomial of S\ is x + 1. Similarly, 

S 2 = (aL)(L + l)(S) = (0, a 2 , a 2 , 1, a 2 , 0, a, a, 1 + a, a, 0, 1, 1, a, 1, 0, a 2 , a 2 , . . .) 

and the minimal polynomial of S 2 is (x 2 + x + a 2 ). 
Step 3. Note that 

1 a 2 

SlO) = — — 7, S 2 (X) = — ■ j 

x + 1 or + x + cr 

and = 1, k(x 2 +x+a 2 ) = 2. Then, by Theorem^ the minimal polynomial 

of T(Si) is given by 

h x (x) = (l + xf {Tl ' o(1)) = 1 
and the minimal polynomial of T(S 2 ) is given by 

h 2 (x) = (x 2 + x + ay {T2 ' o{a2)) a{x 2 + x + ay iT2 ^ a2)) = (x 2 + x + a 2 )(x 2 + x + a). 

Step 4. The minimal polynomial of T(S) is the product of hi(x), h 2 (x), i.e., 
(x 2 + x + a 2 )(x 2 + x + a). 

5 On m-sequence 

In this section, we consider the special case in which the minimal polynomial of 
5* is assumed to be primitive. The following lemma is needed in this section: 

Lemma 7 [TDJ Lemma 3] Let f(x) be a primitive polynomial over GF(q n ) with 
degree m. Let a be a root of f(x) in the splitting field GF(q mn ). Then, the 
minimal polynomial g(x) of a over GF(q) is given by 

g(x) = f{x)a{f{x))^ 2 \f{x)) ■ ■ • ^ (/(*)) 

where a^(f(x)) is the minimal polynomial of ofl 1 over GF(q n ) for 1 < i < n — 1. 

Denote Root(p(x)) the set of the roots of p(x). By the proof of [TUl Lemma 3], for 
< i ^ j < n — 1, Root(a^(f(x))) and Root(a^(f(x))) have no intersection and 
U^Tq 1 Root(a^ '(/ (x))) = Root(g(x)). Therefore, we have the following lemma: 

Lemma 8 Let f(x) be a primitive polynomial over GF(q n ) . Then, k(f) = n and 

g(x) = f(x)a(f(x))a^(f(x)) ■ ■ • ^(/(x)) 
is primitive over GF(q). 
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Theorem 4 Let S be an m-sequence over GF(q n ) with primitive minimal poly- 
nomial h(x). Let T be a linear transformation of GF(q n ) over GF(q) with 

T(x) = c x + C\X q H Vc n _ix q , CieGF(q n ). 

Then, the minimal polynomial ofT(S) is given by 

h{x) eo {a{h{x))) ei ■ ■ ■ {a^ihix)))^- 1 

where ej = if Cj = and ej = 1 if Cj ^ 0. 

Proof: Assume that S(x) = g(x)/h(x) where g(x) = bo + b\x + - ■ - + bix l ^ 
and / < deg(h(x)). Then, we have (b , b\, . . . , b{) ^ (0, 0, . . . , 0). It is known 
from Lemma El that k(h) = n. Then, by ([3]) and (jlj), we have T n .j(x) = CjX q3 for 
< j < n. By Theorem (TJ the minimal polynomial of T(S) is: 

h(x) eo (a(h{x))) ei ■ ■ ■ (a^ihixW- 1 

where e j = /j,(T nJ (b ),T n j(bi), . . .,T nJ (fy)) = //(c 3 -&<f , cjbf , . . .,Cjbf). Note that 
(tig , bf , . . . , bf ) / (0, 0, . . . , 0) since (b , h, . . . , b t ) ^ (0, 0, . . . , 0). Thus, by the 
definition of /z, we have Cj = fi(cjbQ , Cjbf , . . . , Cjbf ') = ^{cj). Therefore, the 
minimal polynomial of T(S) is: 

h{x) eo {a{h{x))) ei ■ ■ ■ (ct^^Oe))) 6 "- 1 

where ej = if c 3 ■ = and ej — 1 if Cj ^ 0. This completes the proof. □ 

Remark 2 It is known from Theorem^ that the main result |2l Theorem 1] is 
correct when the linear recurring sequence S over GF(q n ) is an m-sequence. 

Corollary 3 Suppose that S, h(x),T(x) are defined as the same as in Theorem 
0. Assume that Cj ^ for all < j < n. Then, the minimal polynomial ofT(S) 
is 

h{x)a{h{x)) ■ ■ ■ a^ihix)) 

and the linear complexity of such T(S) is the maximum among all possible linear 
transformations T of GF(q n ) over GF(q) . 

At the end of this section, we consider a special linear transformation of GF(q n ) 
over GF(q), trace function. 
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Corollary 4 Let Tr be the trace function from GF(q n ) to GF(q), i.e, 

Tr(x) = x + x q + x q + ■ • • + x q 

and let h(x) be a primitive polynomial over GF(q n ). Then, Tr is a bijective 
mapping from the set of all m-sequences over GF(q n ) with primitive minimal 
polynomial h(x) to the set of all m-sequences over GF(q) with primitive minimal 
polynomial g(x) = h(x)a(h(x)) ■ ■ ■ a^ n ~^ (h(x)) over GF(q). 

Proof: Let S be an m-sequence over GF(q n ) with minimal polynomial h(x). 
By Lemma [Eland Corollary [3] , we have Tr(S) is an m-sequence over GF(q) with 
primitive minimal polynomial g(x) = h{x)a{h{x)) ■ ■ ■ a^^ih^x)) over GF(q). 
For any two different m-sequences Si, S2 over GF(q n ) with minimal polynomial 
h(x), we have Si— 62 is also an m-sequence over GF(q n ) with minimal polynomial 
h(x). Thus, Tr(Si — S2) is an m-sequence over GF(q) with minimal polynomial 
g(x). Then, Tr(Si — S 2 ) 7^ 0. So, Tr(Si) 7^ Tr^) which implies that Tr is 
injective. Since h(x), a{h(x)), . . . , a^' 1 ' (h(x)) have the same degree, then the 
number of m-sequences over GF(q n ) with minimal polynomial h(x) is equal to 
that of m-sequences over GF(q) with minimal polynomial g(x). Therefore, Tr is 
bijective. This completes the proof. □ 

6 Upper bound on linear complexity of T(S) 

In this section, we give the definition of linear complexity over GF(q) of linear 
recurring sequence S over GF(q n ) and then show it is an upper bound on the 
linear complexity of T(S) when T exhausts all possible linear transformations 
of GF(q n ) over GF(q). The notion of linear complexity over GF(q) of linear 
recurring sequences over GF(q n ) was introduced by Ding, Xiao and Shan in [3], 
and discussed by some authors, for example, see [8], [TT]-[20j. 

Let S — (si, S2, ■ ■ ■ , s m , . . .) be a linear recurring sequence over GF(q n ). The 
polynomial f(x) = a + a^x + ■ • • + a m x m over GF(q n ) is called a characteristic 
polynomial over GF(q n ) of S if 

a Si + a x si +i H h a m s m+i = for i > 1. 

If the characteristic polynomial f(x) is a polynomial over GF(q), that is, all 
ai G GF(q), we call f(x) a characteristic polynomial over GF(q) of S. The monic 
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characteristic polynomial over GF(q n ) (resp. GF(q)) of S with least degree is 
called the minimal polynomial over GF(q n ) (resp. GF(q)) of S. The degree 
of the minimal polynomial over GF(q n ) (resp. GF(q)) of S is called the linear 
complexity over GF(q n ) (resp. GF(q)) of S. We will use the following lemma in 
this section. 

Lemma 9 [8', Theorem 5] Let S be a linear recurring sequence over GF(q n ) 
with minimal polynomial h(x) G GF(q n )[x}. Assume that the canonical factor- 
ization of h(x) in GF(q n )[x] is given by 

3=1 

where {P uv } are distinct monic irreducible polynomials in GF(q n )[x], Pjo, Pji, . . . , Pji 
are in the same a -equivalence class and P uv , P tw are in the different o -equivalence 
classes when u^t. Then the minimal polynomial over GF(q) of S is given by 

i 

H(x) = ]jR(P j0 p 

3=1 

where tj = max{ejo, e^i, . . . , e^.} and R(Pjo) = Pjo&{Pjo) • • • a^ Pi °^~ 1 ' {Pjo) for 
l<j<l 

Denote L q n(S) the linear complexity over GF(q n ) of S and L q (S) the linear 
complexity over GF(q) of S. Note that L q n(S) is the linear complexity of S, 
which is discussed in the previous sections. Then, we have the following theorem: 

Theorem 5 Let S be a linear recurring sequence over GF(q n ) with minimal 
polynomial h(x) over GF(q n ) which has no multiple roots. Then, for any linear 
transformation T of GF(q n ) over GF(q) , we have 

L qn (T(S))<L q (S). 

Proof: Recall that {Pji}, {Sj} and {hj} are defined in Theorem [3l Note 
that the minimal polynomial over GF(q n ) of T(S) is the product of {hj}. By 
Theorem [21 we have hj\R(Pj ) where R(Pj ) is defined in Lemma [9j Then, by 
Theorem [3] and Lemma [9], the minimal polynomial over GF(q) of S is a multiple 
of the minimal polynomial over GF(q n ) of T(S). Therefore, L q n(T(S)) < L q (S). 

□ 
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Remark 3 Theorem^ gives an upper bound on the linear complexity ofT(S). 
By CorollaryUi we know that this bound is tight if the minimal polynomial h(x) 
over GF(q n ) of S is irreducible over GF(q n ). 
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